chore: use secret for app id

Now use secrets to acquire APP_ID, all called workflow secrets change to inherit.
linuxdeepin · Jul 10, 2023 · 559e911 · 559e911
1 parent 3fa908e
commit 559e911
Show file tree

Hide file tree

Showing 14 changed files with 24 additions and 31 deletions.
diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml
@@ -3,13 +3,15 @@ name: auto tag
 on:
   workflow_call:
     secrets:
+      APP_ID:
+        required: true
       APP_PRIVATE_KEY:
         required: true
       TRANSIFEX_API_TOKEN:
         required: true
 
 env:
-  APP_ID: 174141
+  APP_ID: ${{ secrets.APP_ID }}
   APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
   TRANSIFEX_API_TOKEN: ${{ secrets.TRANSIFEX_API_TOKEN }}
 

diff --git a/.github/workflows/backup-to-gitlab.yml b/.github/workflows/backup-to-gitlab.yml
@@ -8,10 +8,8 @@ concurrency:
 jobs:
   backup-to-gitlabwh:
     uses: linuxdeepin/.github/.github/workflows/backup-to-gitlabwh.yml@master
-    secrets:
-      BRIDGETOKEN: ${{ secrets.BRIDGETOKEN }}
+    secrets: inherit
 
   backup-to-gitee:
     uses: linuxdeepin/.github/.github/workflows/backup-to-gitee.yml@master
-    secrets:
-      GITEE_SYNC_TOKEN: ${{ secrets.GITEE_SYNC_TOKEN }}
+    secrets: inherit
diff --git a/.github/workflows/call-clacheck.yml b/.github/workflows/call-clacheck.yml
@@ -12,5 +12,4 @@ concurrency:
 jobs:
   clacheck:
     uses: linuxdeepin/.github/.github/workflows/cla-check.yml@master
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit
diff --git a/.github/workflows/call-transfer-issues.yml b/.github/workflows/call-transfer-issues.yml
@@ -6,5 +6,4 @@ on:
 jobs:
   call:
     uses: linuxdeepin/.github/.github/workflows/transfer-issues-func.yml@master
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit
diff --git a/.github/workflows/cla-check.yml b/.github/workflows/cla-check.yml
@@ -2,6 +2,8 @@ name: "CLA Assistant"
 on:
   workflow_call:
     secrets:
+      APP_ID:
+        required: true
       APP_PRIVATE_KEY:
         required: true
 
@@ -15,7 +17,7 @@ jobs:
         uses: linuxdeepin/contributor-assistant-github-action@master
 
         env:
-          APP_ID: 174141
+          APP_ID: ${{ secrets.APP_ID }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
 

diff --git a/.github/workflows/doc-check.yml b/.github/workflows/doc-check.yml
@@ -2,6 +2,8 @@ name: doxygen-check
 on:
   workflow_call:
     secrets:
+      APP_ID:
+        required: true
       APP_PRIVATE_KEY:
         required: true
 
@@ -16,7 +18,7 @@ jobs:
 
     runs-on: ubuntu-latest
     env:
-      APP_ID: 174141
+      APP_ID: ${{ secrets.APP_ID }}
       APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 

diff --git a/.github/workflows/transfer-issues-func.yml b/.github/workflows/transfer-issues-func.yml
@@ -3,11 +3,13 @@ name: Transfer Issues
 on:
   workflow_call:
     secrets:
+      APP_ID:
+        required: true
       APP_PRIVATE_KEY:
         required: true
 
 env:
-  APP_ID: 174141
+  APP_ID: ${{ secrets.APP_ID }}
   APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
   COMMENT_MESSAGE: "Transfer this issue to the developer-center repository"
   TARGET_REPO: "developer-center"

diff --git a/workflow-templates/backup-to-gitlab.yml b/workflow-templates/backup-to-gitlab.yml
@@ -8,10 +8,8 @@ concurrency:
 jobs:
   backup-to-gitlabwh:
     uses: linuxdeepin/.github/.github/workflows/backup-to-gitlabwh.yml@master
-    secrets:
-      BRIDGETOKEN: ${{ secrets.BRIDGETOKEN }}
+    secrets: inherit
 
   backup-to-gitee:
     uses: linuxdeepin/.github/.github/workflows/backup-to-gitee.yml@master
-    secrets:
-      GITEE_SYNC_TOKEN: ${{ secrets.GITEE_SYNC_TOKEN }}
+    secrets: inherit
diff --git a/workflow-templates/call-build-distribution.yml b/workflow-templates/call-build-distribution.yml
@@ -10,8 +10,4 @@ on:
 jobs:
   check_job:
     uses: linuxdeepin/.github/.github/workflows/build-distribution.yml@master
-    secrets:
-      BUILD_GPG_PRIVATE_KEY: ${{ secrets.BUILD_GPG_PRIVATE_KEY }}
-      BUILD_SSH_PRIVATE_KEY: ${{ secrets.BUILD_SSH_PRIVATE_KEY }}
-      WEBDAV_PASSWD: ${{ secrets.WEBDAV_PASSWD }}
-      WEBDAV_USER: ${{ secrets.WEBDAV_USER }}
+    secrets: inherit
diff --git a/workflow-templates/call-build-linglong.yml b/workflow-templates/call-build-linglong.yml
@@ -12,5 +12,4 @@ concurrency:
 jobs:
   check_job:
     uses: linuxdeepin/.github/.github/workflows/build-linglong.yml@master
-    secrets:
-      BridgeToken: ${{ secrets.BridgeToken }}
+    secrets: inherit
diff --git a/workflow-templates/call-clacheck.yml b/workflow-templates/call-clacheck.yml
@@ -12,5 +12,4 @@ concurrency:
 jobs:
   clacheck:
     uses: linuxdeepin/.github/.github/workflows/cla-check.yml@master
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit
diff --git a/workflow-templates/call-deploy-dev-doc.yml b/workflow-templates/call-deploy-dev-doc.yml
@@ -23,5 +23,4 @@ jobs:
     uses: linuxdeepin/.github/.github/workflows/deploy-dev-doc.yml@master
     with:
       ref: ${{ inputs.tag }}
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit
diff --git a/workflow-templates/call-doc-check.yml b/workflow-templates/call-doc-check.yml
@@ -11,5 +11,4 @@ concurrency:
 jobs:
   check_job:
     uses: linuxdeepin/.github/.github/workflows/doc-check.yml@master
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit
diff --git a/workflow-templates/call-transfer-issues.yml b/workflow-templates/call-transfer-issues.yml
@@ -6,5 +6,4 @@ on:
 jobs:
   call:
     uses: linuxdeepin/.github/.github/workflows/transfer-issues-func.yml@master
-    secrets:
-      APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }}
+    secrets: inherit